Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df07d75d-b1d5-302f-a154-5eeee3c8a79a.roa
File: df07d75d-b1d5-302f-a154-5eeee3c8a79a.roa (raw, json)
Hash identifier: tSwqeZ+mTefu+/a/yfzsI4I3ff+fBOo5Ckez66e2bwU=
Subject key identifier: C2:E2:4B:8E:3D:39:F6:22:A3:3F:41:4F:0C:DC:A2:CE:B4:17:18:6F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B9EBA2E178189454BF180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df07d75d-b1d5-302f-a154-5eeee3c8a79a.roa
Signing time: Wed 11 Dec 2024 15:18:06 +0000
ROA not before: Wed 11 Dec 2024 15:18:06 +0000
ROA not after: Tue 11 Mar 2025 14:18:06 +0000
asID: 396826
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:9e:ba:2e:17:81:89:45:4b:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:06 2024 GMT
Not After : Mar 11 14:18:06 2025 GMT
Subject: CN=d6e92383-da73-41d8-a430-867896dd2846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:0c:64:0a:fb:b5:2b:71:e4:d9:5f:63:cd:
4f:83:b1:78:be:bc:8f:ea:f9:b0:37:11:28:61:30:
79:5c:58:7d:13:72:91:d9:82:e0:9f:2e:80:a9:aa:
95:93:a7:f8:73:57:dc:73:77:82:a5:4b:d8:ed:46:
5f:52:4b:52:45:8a:7c:a4:55:2e:d3:84:c4:d3:6f:
6d:2e:0c:66:0a:a9:03:e6:2d:a6:04:7d:3c:cd:c8:
10:a4:a9:4e:43:9e:a1:02:a2:37:b9:82:72:0b:a0:
9f:fe:db:92:e4:07:2b:e3:9c:ed:82:f0:36:69:fe:
56:c2:47:b6:28:08:7c:fd:df:93:bc:d7:84:0e:48:
ce:81:20:56:c7:b1:e4:20:f3:1b:f8:8b:17:05:49:
c0:7b:26:37:10:db:92:23:92:da:03:f7:2b:fd:c3:
42:65:63:33:47:e6:56:0c:d6:4f:45:3c:a1:36:96:
07:1f:79:bf:60:a9:bb:e6:27:e8:13:7f:16:88:84:
c2:c3:da:bf:65:60:e5:ee:06:c0:a0:14:5c:9c:7a:
4e:64:2c:d6:cb:f3:af:d1:6e:3d:c3:ed:5c:69:01:
fb:da:de:c0:65:ad:39:ef:2f:a3:44:e1:06:8e:13:
d3:cd:01:7c:1e:ad:e9:08:bf:be:34:e6:8a:68:53:
b1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E2:4B:8E:3D:39:F6:22:A3:3F:41:4F:0C:DC:A2:CE:B4:17:18:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df07d75d-b1d5-302f-a154-5eeee3c8a79a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:c7:fb:a5:3e:b1:ab:cf:c8:af:de:34:2c:f0:aa:3c:4e:7a:
d2:fe:e0:b2:0c:9f:8e:b6:2b:25:95:39:74:41:cc:0e:78:89:
8b:12:f8:a3:cf:60:13:0b:fe:9f:2b:fd:a5:96:a8:1b:73:72:
e0:9e:f9:fe:0b:f4:f1:86:39:2f:81:6d:14:2e:68:ef:62:42:
ac:5f:a8:fd:3b:e1:2d:71:f2:3d:5d:b4:37:ff:df:fd:7e:bd:
66:b2:a9:00:0d:b6:df:63:13:c4:f0:c7:94:83:87:96:97:9a:
6d:3e:f2:15:01:92:11:84:c0:0a:cf:ae:e1:05:17:47:08:17:
d9:6e:67:e4:ee:e2:a3:ac:34:a1:0a:06:32:60:ad:80:88:af:
84:23:23:bd:60:fb:77:d8:4f:22:e7:95:ef:a0:7f:59:45:37:
5e:47:21:dd:b7:24:d3:a3:b1:b3:44:27:ae:6f:c2:55:34:bc:
95:6d:ea:3d:fb:fa:3f:31:2b:53:81:69:ec:54:c3:40:0a:b1:
34:dd:0f:0e:51:ec:a5:ee:2c:b1:90:38:7d:79:00:a2:de:39:
3a:0f:aa:ee:76:b1:78:a6:76:5f:82:7d:25:4a:be:75:c3:c8:
95:3c:74:7b:80:37:c7:2e:e5:4b:5e:8c:7a:57:a1:67:86:34:
46:b4:68:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:29 2025 by rpki-client